Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
File:                     p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft (raw, json)
Hash identifier:          YMk6l6+zBAk+t607cHhOEwKU+fBgmXeGZHL3I74nHWk=
Subject key identifier:   12:25:FE:67:9D:FD:5E:0B:5C:7C:32:88:91:12:EE:4A:60:5D:44:A1
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Certificate issuer:       /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial:       01974C3232871B000CFF837CD6C9DA14B8F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
Manifest number:          1592
Signing time:             Sat 07 Jun 2025 21:00:47 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:47 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:47 +0000
Files and hashes:         1: XbTeM1PqMKcQqGHBF2Epuf32B9A.roa (hash: hOnMCvxmcOEtS0aimUSMyI+EYwi7WWRIO2fcpaLnTMo=)
                          2: XpnHifTD8tZkiiLNtKNcouzj_q8.roa (hash: dfrWKnF8ZWfYIDslMiPEBOGNyMwphNxvuYUIKjNNzR8=)
                          3: bJdp9vJThsmnU-T4vEJV1p1mH_Y.roa (hash: f3Bk9K95jCENctRrDvO2NphCV9j781ceJJ/eJh+VuWY=)
                          4: hRG76VocwZXhxkxCAJrESxkkjbY.roa (hash: R6reBqJWi+zQpuGx/72cFGp8W0OEKy5DLaWeb2k91DA=)
                          5: iWHLz7pb0VOnknWH2cLTUErxOZo.roa (hash: jWeDGrOMaI4VEcetBFaHjDSN9dYVfQeBBIRCHkcbqGg=)
                          6: l9udc1nNsxrHs9SGGxHoTpBRajQ.roa (hash: cENTXB6RTPeVgbu01KS7vnsJeTDyjU4OfXpDr++EjWQ=)
                          7: p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl (hash: Rcc6BpKgPezf09Uamn1H3Xsziz1/lVxchaP/LE9dKPk=)
                          8: qK4AAnwuTwRwNOb2CLLZs8W9VuI.roa (hash: cqQ7l3QbvSMEr2phGWC5VDW+4MerE13RpRcZdGJsAvw=)
                          9: ydZkgwYcvYbM7mbYd53RAsEkq3U.roa (hash: qwmH6QR7NKSIBlvN+e3NJdnmXczvm/lNUAul9UFFgLI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:32:32:87:1b:00:0c:ff:83:7c:d6:c9:da:14:b8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
        Validity
            Not Before: Jun  7 21:00:47 2025 GMT
            Not After : Jun  8 21:00:47 2025 GMT
        Subject: CN=1225fe679dfd5e0b5c7c32889112ee4a605d44a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f9:ac:63:5d:60:ae:cd:f1:40:d9:39:53:b8:
                    a1:d0:9b:b7:3d:21:15:f9:d0:33:1d:2c:62:0e:6f:
                    1b:d1:c0:08:34:f8:8e:f9:30:07:4e:0b:94:82:04:
                    63:02:29:3f:5f:79:00:7a:b6:a5:41:e4:e7:b0:b2:
                    e2:52:e3:9c:4a:3b:be:0d:ea:ef:2b:5a:d0:25:23:
                    2e:78:8b:df:77:40:73:a7:de:c7:44:46:9f:e8:2d:
                    54:32:02:ea:43:78:d7:b6:c2:03:2a:a9:44:9e:a5:
                    7a:ab:1b:d2:69:89:47:15:44:99:9f:ea:f1:79:2c:
                    90:5f:38:59:05:b0:04:1b:c5:25:6e:60:32:8e:67:
                    84:c4:41:75:5b:df:85:2e:b5:a1:c0:a5:0b:4a:2e:
                    8c:12:c2:46:3e:85:dc:43:aa:30:e1:f8:75:32:4a:
                    46:52:85:a8:e1:bf:09:18:3c:72:e1:d3:91:f8:6a:
                    2d:27:03:2e:2f:f2:14:ab:29:1b:74:eb:23:ad:38:
                    6e:62:40:9b:a1:3e:ff:43:02:e8:48:99:ef:bd:97:
                    55:c5:dc:d6:f3:2f:8d:c1:b4:ff:65:b5:d5:78:d1:
                    1f:3d:ed:93:7a:06:13:c9:5e:00:10:63:c3:46:75:
                    29:b9:7f:e9:be:05:7d:d4:7f:ac:3a:7c:3d:09:44:
                    9b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:25:FE:67:9D:FD:5E:0B:5C:7C:32:88:91:12:EE:4A:60:5D:44:A1
            X509v3 Authority Key Identifier:
                keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ed:03:cd:7c:37:a6:32:c9:1a:46:d1:49:84:a8:0a:76:7b:
         d5:72:f4:5b:96:bc:d4:75:d9:c0:fe:c4:31:fb:65:69:3e:2f:
         12:f6:21:63:ec:f2:55:79:83:64:e8:a6:70:06:e1:dd:f6:21:
         cb:3a:1f:ab:93:d0:c2:b5:8b:d4:a4:b7:4a:8a:dc:1e:4a:25:
         62:b2:de:ad:ca:20:2d:df:00:a2:fe:63:07:fd:09:ce:a6:ad:
         aa:d5:32:8b:9b:6c:22:9e:c1:19:7e:5c:d2:82:30:60:96:2d:
         b7:2b:77:f4:fb:42:8f:0c:5f:ec:ef:c8:ea:78:c1:e5:d5:32:
         82:b7:ca:87:b9:38:62:9d:36:e3:ce:ac:66:58:f8:92:2c:91:
         14:9b:50:41:b1:08:88:52:02:e6:8f:0a:5c:2e:7e:e5:c2:3c:
         8d:aa:d1:c1:0a:f1:98:c6:10:f2:3f:34:c0:e2:2a:b3:53:d9:
         c1:a2:aa:fa:10:3f:44:e0:37:65:68:60:74:e1:1d:87:51:ba:
         c3:74:fe:e9:c8:76:2d:25:34:0c:30:62:13:79:a8:ac:21:a0:
         af:6b:00:61:8c:55:90:63:12:90:c6:47:58:76:d5:77:cc:02:
         3d:55:0c:80:24:57:76:a7:fc:80:fa:04:e4:89:98:ba:6b:be:
         58:d1:9a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:21:52 2025 by rpki-client